Practice Number 1: Build a Risk Aware Culture
Does your company culture view information as a critical asset?
Everyone has the potential to contaminate the organization through link clicking, phishing, social engineering, or failing to patch.
The Board and Senior management need to view risk awareness as a company imperative and monitor the organization.
Viewing information as a critical asset requires an organization consistently vigilant.
Actions to Take:
- Increased employee awareness
- Data encryption when at rest
- Automated algorithmic malicious code detection
- Security event correlation beyond the individual organization
- Security information and event management (SIEM) technologies
- Increased government and private industry collaboration
Next Steps
- Hire a Chief Information Security Officer (CISO) if you don’t have one
- Enable security leadership to have a strategic voice in the organization
- Ensure security is discussed at the Senior Management and Board levels
- Create a consistent and persistent education and awareness training program
- Ensure your security/risk committee has approved your information security incident management response
- Establish security metrics to track progress against the ten essential practices
Notes:
Lovejoy, Kris. “10 Security Essentials Every CIO Needs to Know.” Security Intelligence. n.p., 04 Sept. 2013. Web. 11 Feb. 2015. Cawthray, Stewart. “IBM Increases Internet Services.” Network Security 1995.4 (1995): 4. www.ibm.com. IBM, Sept. 2012. Web. 11 Feb. 2015. Pfau, Robert. “Global Information Assurance Certification Paper.” Global Information Assurance Certification. Global Information Assurance Certification, 2 Aug. 2003. Web. 11 Feb. 2015. Palermo, Elizabeth. “10 Worst Data Breaches of All Time.” Tom’s Guide. Tom’s Guide, 06 Feb. 2015. Web. 12 Feb. 2015. “Global Information Security Survey: 2015 Results by Industry.” PwC. PwC, 30 Sept. 2014. Web. 15 Feb. 2015. Photo Credit via flickr.com: Morris, David. “0710 Old Lock.” Flickr. Yahoo!, 14 July 2007. Web. 15 Feb. 2015.
is a podcast dedicated to the development of technology leadership hosted by , a seasoned global technology leader who has held positions with Fortune 500 companies throughout the world including diverse countries: Japan, Hong Kong, Singapore, India, United Kingdom, and the United States. He is currently based in New York.
Related